Flash, silverlight, java and friends can also make http connections. This
is controlled by policies like crossdomain.xml and clientaccesspolicy.xml
on the receiving end, but what about the browser? Does connect-src also
apply to these plugins? Could it? Should it?
Erlend